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Paul, 

Herewith some possible new claims from our chief technologist, Andrew Ryan. 
Please feel free to oon.ta.ot him directly to discuss. 

•mail: andrew@id-art3.com tel:01273 233148 



Best regards 
Paul Barrett 
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Some possible new claims . . . 



A method of wratroiling access to Internet web sites and web services where me user is presented 
with a number of complex images and is asked to identify me key complex images from amongst 
the false complex image* Minimum bandwidth objectives are realised by removing the need to 
transmit the image data from server to client each time the site or service requires verification of 
the user's identity! The image data can be cached by me cheat wKh no security implications as the 

Stores of key complex images and false complex images will not be discernible to any par?other 

! - 
man the genuine user . Communication from server to client of which images to display to the user 

and commuhktttiqn from cheat to server of which images the user has identified will take the form 

of image reference numbers where each image reference number identifies a unique complex 



2. Amethod according to the above claim of increasing the usability and security of web sites and 
wab services that ^wrrenuy require the user to eater a password or PIN In order to gain access. 
This is achieved by means of client software that converts a user's input response when they are 

asked to identify ajniimber of key complex images from a display containing a number of complex Am »*ctt*f 
Images (mcluding key complex images and false complex images) into a sequence of numbers that ^ 
can be used as the user's password or PIN to gain access to the controlled site or service. b*.- 

3. A method of preventing ixjnftision between new sets of key complex images and previous sets by 



replacement of the 



entire set of complex images with a different set of complex images (including 



new key complex linages and new false complex images). 

4, A method of avoiding the misuse of access control information which currently exists when users 
are allowed to use same passwords or PINs at a number of different Internet sites or services. 
Bach she or service may use an entirely different set of complex images from which each user 
selects (or mis selected for them) a number of key complex images to be used as described in the 
above claims. This method makes it impossible for a user to: 

choose the sank key complex images at each sire; 

choose a key complex image at one site which is used as false complex images at another site; 

: 

This method relies entirely on the user' s ability to recognise complex images and does not require 
the users to afiflnriflte particular complex images with particular sites or services. 
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